A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /…

A SQL injection vulnerability (CVE-2026-14641) has been identified in SourceCodester Class and Exam Timetabling System version 1.0. The vulnerability exists in the /edit_course.php file, where manipulation of the 'ID' argument can lead to SQL injection. The attack can be executed remotely without requiring local access. A public exploit has been disclosed, increasing the risk of active exploitation. The affected product is a web-based timetabling application commonly used in educational institutions. The vulnerability is rated as high severity given its remote exploitability and public disclosure. No patch or mitigation details are mentioned in the article.